Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/2fd79258-c9bb-3f10-adf3-709e226aa2ba.roa
File: 2fd79258-c9bb-3f10-adf3-709e226aa2ba.roa (raw, json)
Hash identifier: mYqTruoi1KGPXfeBg7FGTmJk+y0F2lenXcc61gnXM3o=
Subject key identifier: C7:69:42:FB:66:DF:C0:CD:2D:F7:4B:82:09:68:ED:5A:1C:DD:ED:E2
Certificate issuer: /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial: 010D0C9F432858475BDB7E756623050FDD94EF00
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/2fd79258-c9bb-3f10-adf3-709e226aa2ba.roa
Signing time: Sat 28 Sep 2024 01:00:31 +0000
ROA not before: Sat 28 Sep 2024 01:00:31 +0000
ROA not after: Fri 27 Dec 2024 02:00:31 +0000
asID: 64200
IP address blocks: 67.21.32.0/22 maxlen: 24
192.154.192.0/19 maxlen: 24
192.154.232.0/21 maxlen: 24
192.154.240.0/20 maxlen: 24
199.188.88.0/21 maxlen: 24
2604:8180::/31 maxlen: 31
Validation: Failed, certificate revoked on Fri 01 Nov 2024 18:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5b:db:7e:75:66:23:05:0f:dd:94:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
Validity
Not Before: Sep 28 01:00:31 2024 GMT
Not After : Dec 27 02:00:31 2024 GMT
Subject: CN=094322f9-4654-4de2-83c1-ef53a3e6862a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:0e:60:a8:e2:1f:1e:6f:dc:50:59:90:98:
cb:83:93:ed:a1:c0:c8:f3:2c:19:37:8d:54:bc:7c:
79:61:b9:29:6e:b7:38:f0:07:d1:55:b3:c1:68:72:
d5:ec:70:51:ab:a1:28:47:ba:2a:4a:6e:22:7c:6d:
dc:b9:26:29:dc:d0:b7:0f:d1:a0:e5:a8:53:65:c8:
88:34:20:4d:27:ae:3d:6f:bd:2c:5f:90:9d:07:2a:
bf:9b:09:8d:ca:3f:0d:4b:6e:ac:13:c8:7a:d1:62:
a7:b3:a8:b7:0e:3c:1e:5e:d1:c6:37:29:c3:6d:14:
0e:0c:28:cf:3a:16:17:68:c8:25:1e:01:b0:33:01:
85:64:2a:52:ed:f9:42:a7:2d:64:69:8a:42:80:77:
78:22:7d:4c:5f:c2:e7:06:6f:e0:08:ad:11:ab:3a:
70:41:11:a2:b2:6a:6f:9a:5e:c5:fa:39:d3:8b:ee:
ed:76:c7:94:00:5b:45:a9:c9:8a:cc:44:a0:10:6d:
4b:0b:e4:c1:9c:a3:35:93:a8:03:9c:4a:26:29:61:
19:f9:6a:d3:fc:53:71:ce:93:66:9d:31:80:f6:f9:
a7:c4:66:7f:48:f2:5f:4b:96:9e:54:51:03:c7:bf:
35:ae:ed:a4:3d:88:f7:d3:e4:9d:a0:f4:51:e2:07:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:42:FB:66:DF:C0:CD:2D:F7:4B:82:09:68:ED:5A:1C:DD:ED:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/2fd79258-c9bb-3f10-adf3-709e226aa2ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
X509v3 Authority Key Identifier:
keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
sbgp-ipAddrBlock: critical
IPv4:
67.21.32.0/22
192.154.192.0/19
192.154.232.0-192.154.255.255
199.188.88.0/21
IPv6:
2604:8180::/31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:14:d0:b0:8e:74:d7:21:99:e6:f6:a3:ae:fe:f0:24:a2:fb:
3b:cb:aa:81:f5:da:28:49:8b:9a:ba:c5:7a:2a:7a:72:01:71:
e5:b8:79:09:3a:2a:70:2e:df:61:8f:5b:4e:dd:5a:af:32:45:
9e:c3:bd:86:a4:97:73:c3:2b:cf:43:de:a6:ef:56:72:0e:f6:
60:3b:42:6b:2f:d4:d8:17:d1:0c:1c:35:b6:d8:7e:e4:23:5c:
a3:df:0c:9b:9d:75:6a:88:48:99:77:c1:d3:19:fb:fb:25:c5:
23:42:ff:a7:2e:5f:98:6c:b5:aa:4e:96:87:e1:4b:12:02:45:
25:07:8a:b3:07:fc:50:e3:c5:35:eb:c9:22:f3:60:86:02:8b:
f5:22:c5:14:cb:3b:13:d5:d9:ec:31:5a:f6:6d:33:f6:61:ff:
d6:6c:66:1e:13:be:47:1f:be:e6:6f:9a:b9:25:dc:cb:0d:a6:
c2:d2:d2:a3:a7:23:e7:13:f2:2b:27:3f:26:21:d8:4c:e1:08:
9f:d1:81:c5:09:37:28:49:f7:67:db:12:ae:d4:6c:2b:cf:a0:
40:e7:79:2c:c5:66:de:a4:8b:34:81:2e:8f:6a:31:28:3d:20:
68:d8:ac:9d:1b:67:84:47:8b:9d:13:0a:2e:a9:b3:6c:e3:60:
96:49:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 20:38:00 2024 by rpki-client on console-ams.rpki-client.org